DNSSEC is currently disabled for a while until I figure out why ISNIC can’t reach my master nameserver (ganymede.ns.lunar.systems). Sorry about that 🙁

There has been a concerning vulnerability found in libotr. You should upgrade that package immediately. More details at otr.cypherpunks.ca/news.php.

Yes, that’s right… Due to me not being able to afford the excellent dedicated server that XMPP.is ran off of in the past I’ve had to make the switch to a cheaper and much more efficient scaleway.com ARM server. Since I did not utilize most the dedicated server’s resources I believe Prosody will run just fine on it. For the price this thing is well worth it.

Can we call XMPP.is “green” since we use an efficient ARM server 😀 ? I know there might be some concerns about privacy in France especially about all the controversy with anti-privacy laws being proposed/passed. I don’t think there is much of a risk, since no logs are being stored and the passwords are hashed. The most someone could get out of the server is who your buddies are. If you connect with Tor it makes it all-the-more confusing for people who wish to find your location. If something more serious like the server being setup as a honeypot I’m pretty sure I’d know about it. I am confident in my security practice.

Besides that, everything has been completely migrated to the new server and it should be functioning as it always has. If you have any questions or problems you can always contact me.

Enjoy!

It has come to my attention that people are unable to register with Tor Messenger due to a bug where the client doesn’t attempt to fetch the SRV records. This is currently listed as a bug report on their mailing list here: mail-archive.com/tor-bugs@lists.torproject.org/msg84732.html

Hopefully this is fixed soon but I have made a guide that contains a work-around for those who want to use Tor Messenger right now.

See that guide here: xmpp.is/docs/connect/tor-messenger/

XMPP.is is now running on a large Hetzner dedicated server. All data has been transferred to the new server and everything seems to be running smoothly. I decided to do this because of LeaseWeb’s big mess up with their storage platform in the Netherlands data center and I believe running on a dedicated platform will be more reliable and secure.

Here is a benchmark of the new server: